[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-\u002Fru\u002Fdocs\u002Fsecurite\u002Fprincipes":3,"docs-nav-ru":434},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"body":10,"_type":428,"_id":429,"_source":430,"_file":431,"_stem":432,"_extension":433},"\u002Fru\u002Fdocs\u002Fsecurite\u002Fprincipes","securite",false,"","Принципы безопасности","Четыре неизменных обязательства betool: строгая мультиарендность, аудит межтенантного доступа, обоснованный отказ от деструктивных операций, суверенные LLM.",{"type":11,"children":12,"toc":419},"root",[13,29,36,48,132,138,150,190,203,209,221,227,260,266,282,287,374,384,390],{"type":14,"tag":15,"props":16,"children":17},"element","p",{},[18,21,27],{"type":19,"value":20},"text","betool спроектирован для ",{"type":14,"tag":22,"props":23,"children":24},"strong",{},[25],{"type":19,"value":26},"регулируемых сред",{"type":19,"value":28},". Безопасность не является слоем, добавленным задним числом: это инвариант, определяющий каждую строку кода, каждую миграцию, каждый модуль.",{"type":14,"tag":30,"props":31,"children":33},"h2",{"id":32},"_1-строгая-мультитенантность",[34],{"type":19,"value":35},"1. Строгая мультитенантность",{"type":14,"tag":15,"props":37,"children":38},{},[39,41,46],{"type":19,"value":40},"Каждая организация владеет ",{"type":14,"tag":22,"props":42,"children":43},{},[44],{"type":19,"value":45},"своими собственными",{"type":19,"value":47}," данными, pipeline, секретами, файлами и ключами LLM. Изоляция обеспечивается:",{"type":14,"tag":49,"props":50,"children":51},"ul",{},[52,79,97,115],{"type":14,"tag":53,"props":54,"children":55},"li",{},[56,61,63,70,72,77],{"type":14,"tag":22,"props":57,"children":58},{},[59],{"type":19,"value":60},"На уровне базы данных",{"type":19,"value":62}," — каждая бизнес-таблица содержит индексированный столбец ",{"type":14,"tag":64,"props":65,"children":67},"code",{"className":66},[],[68],{"type":19,"value":69},"org_id",{"type":19,"value":71},", а серверные запросы ",{"type":14,"tag":22,"props":73,"children":74},{},[75],{"type":19,"value":76},"всегда",{"type":19,"value":78}," фильтруются по организации сессии.",{"type":14,"tag":53,"props":80,"children":81},{},[82,87,89,95],{"type":14,"tag":22,"props":83,"children":84},{},[85],{"type":19,"value":86},"На уровне файловой системы",{"type":19,"value":88}," — у каждой организации есть собственный корень в ",{"type":14,"tag":64,"props":90,"children":92},{"className":91},[],[93],{"type":19,"value":94},"\u003Cdata_root>\u002Forgs\u002F\u003Corg_id>\u002F",{"type":19,"value":96},". Никаких общих путей.",{"type":14,"tag":53,"props":98,"children":99},{},[100,105,107,113],{"type":14,"tag":22,"props":101,"children":102},{},[103],{"type":19,"value":104},"На уровне кэша",{"type":19,"value":106}," — кэши раздельны по организациям; ни одной общей записи без явного флага ",{"type":14,"tag":64,"props":108,"children":110},{"className":109},[],[111],{"type":19,"value":112},"is_shared = TRUE",{"type":19,"value":114},".",{"type":14,"tag":53,"props":116,"children":117},{},[118,123,125,130],{"type":14,"tag":22,"props":119,"children":120},{},[121],{"type":19,"value":122},"На уровне секретов",{"type":19,"value":124}," — у каждой организации собственное хранилище, собственные ключи API, собственные токены. Никакого глобального запасного варианта. Секреты, введённые в конфигурации узла (HMAC-секрет, токен, пароль), также ",{"type":14,"tag":22,"props":126,"children":127},{},[128],{"type":19,"value":129},"маскируются везде, где конфигурация читается повторно",{"type":19,"value":131},", — редактор, API, инструменты MCP, читаемые ИИ, предложения.",{"type":14,"tag":30,"props":133,"children":135},{"id":134},"_2-обязательный-аудит-межтенантного-доступа",[136],{"type":19,"value":137},"2. Обязательный аудит межтенантного доступа",{"type":14,"tag":15,"props":139,"children":140},{},[141,143,148],{"type":19,"value":142},"Некоторым ролям (как правило, учётным записям операторов платформы на стороне поставщика) ",{"type":14,"tag":22,"props":144,"children":145},{},[146],{"type":19,"value":147},"может",{"type":19,"value":149}," потребоваться доступ к контенту другой организации в целях поддержки. Такой доступ:",{"type":14,"tag":49,"props":151,"children":152},{},[153,163,180],{"type":14,"tag":53,"props":154,"children":155},{},[156,161],{"type":14,"tag":22,"props":157,"children":158},{},[159],{"type":19,"value":160},"Обусловлен согласием (opt-in) целевой организации",{"type":19,"value":162}," — отзываемым в любой момент из панели администратора.",{"type":14,"tag":53,"props":164,"children":165},{},[166,171,173,179],{"type":14,"tag":22,"props":167,"children":168},{},[169],{"type":19,"value":170},"Регистрируется при каждом обращении",{"type":19,"value":172}," — выделенная таблица аудита с областью действия по целевой организации, доступная клиентам через маршрут ",{"type":14,"tag":64,"props":174,"children":176},{"className":175},[],[177],{"type":19,"value":178},"GET \u002Fapi\u002Fadmin\u002Fme\u002F*-reads",{"type":19,"value":114},{"type":14,"tag":53,"props":181,"children":182},{},[183,188],{"type":14,"tag":22,"props":184,"children":185},{},[186],{"type":19,"value":187},"Отклоняется в случае сбоя записи аудита",{"type":19,"value":189}," — никакого чтения без следа.",{"type":14,"tag":15,"props":191,"children":192},{},[193,195,202],{"type":19,"value":194},"См. ",{"type":14,"tag":196,"props":197,"children":199},"a",{"href":198},"\u002Fru\u002Fdocs\u002Fsecurite\u002Faudit-rgpd",[200],{"type":19,"value":201},"Аудит и GDPR",{"type":19,"value":114},{"type":14,"tag":30,"props":204,"children":206},{"id":205},"_3-мотивированный-отказ-при-деструктивных-операциях",[207],{"type":19,"value":208},"3. Мотивированный отказ при деструктивных операциях",{"type":14,"tag":15,"props":210,"children":211},{},[212,214,219],{"type":19,"value":213},"Любая операция, которая уничтожает или заменяет контент другой организации (REPLACE-IN-PLACE дочерних элементов, DELETE), ",{"type":14,"tag":22,"props":215,"children":216},{},[217],{"type":19,"value":218},"отклоняется",{"type":19,"value":220},", если целевая организация не активировала согласие на чтение. Обоснование: без видимости оператор предложил бы полезную нагрузку, которая могла бы вслепую перезаписать существующий контент.",{"type":14,"tag":30,"props":222,"children":224},{"id":223},"_4-суверенность-модели-llm",[225],{"type":19,"value":226},"4. Суверенность модели LLM",{"type":14,"tag":49,"props":228,"children":229},{},[230,240,250],{"type":14,"tag":53,"props":231,"children":232},{},[233,238],{"type":14,"tag":22,"props":234,"children":235},{},[236],{"type":19,"value":237},"Нативная поддержка BYOK",{"type":19,"value":239}," — ваши ключи OpenAI, Anthropic, Google управляются вашей организацией. Никакой межорганизационной утечки. BYOK необязателен (существуют управляемые модели с оплатой в кредитах), но рекомендуется в регулируемой среде.",{"type":14,"tag":53,"props":241,"children":242},{},[243,248],{"type":14,"tag":22,"props":244,"children":245},{},[246],{"type":19,"value":247},"Приватные модели",{"type":19,"value":249}," — Ollama, LM Studio или любой endpoint, совместимый с OpenAI (vLLM…), размещённые у вас или в вашем частном облаке. Промпты и ответы никогда не покидают ваш периметр.",{"type":14,"tag":53,"props":251,"children":252},{},[253,258],{"type":14,"tag":22,"props":254,"children":255},{},[256],{"type":19,"value":257},"Никакого скрытого общего пула",{"type":19,"value":259}," — если организация использует общую модель, это явное решение с контролем доступа.",{"type":14,"tag":30,"props":261,"children":263},{"id":262},"инженерная-позиция",[264],{"type":19,"value":265},"Инженерная позиция",{"type":14,"tag":267,"props":268,"children":269},"blockquote",{},[270],{"type":14,"tag":15,"props":271,"children":272},{},[273,275,280],{"type":19,"value":274},"Наш стандарт — ",{"type":14,"tag":22,"props":276,"children":277},{},[278],{"type":19,"value":279},"точность",{"type":19,"value":281},": максимальная устойчивость, полная наблюдаемость, детерминизм, защита от галлюцинаций, защита от регрессий, тесты на каждом шагу.",{"type":14,"tag":15,"props":283,"children":284},{},[285],{"type":19,"value":286},"Конкретно, при любом компромиссе на уровне архитектуры \u002F кода \u002F промпта:",{"type":14,"tag":288,"props":289,"children":290},"table",{},[291,315],{"type":14,"tag":292,"props":293,"children":294},"thead",{},[295],{"type":14,"tag":296,"props":297,"children":298},"tr",{},[299,305,310],{"type":14,"tag":300,"props":301,"children":302},"th",{},[303],{"type":19,"value":304},"Выбор",{"type":14,"tag":300,"props":306,"children":307},{},[308],{"type":19,"value":309},"Ожидаемый выбор",{"type":14,"tag":300,"props":311,"children":312},{},[313],{"type":19,"value":314},"Почему",{"type":14,"tag":316,"props":317,"children":318},"tbody",{},[319,338,356],{"type":14,"tag":296,"props":320,"children":321},{},[322,328,333],{"type":14,"tag":323,"props":324,"children":325},"td",{},[326],{"type":19,"value":327},"Задержка × 2 против сокращённого рассуждения",{"type":14,"tag":323,"props":329,"children":330},{},[331],{"type":19,"value":332},"× 2",{"type":14,"tag":323,"props":334,"children":335},{},[336],{"type":19,"value":337},"Потерянная точность возвращается доверием пользователей",{"type":14,"tag":296,"props":339,"children":340},{},[341,346,351],{"type":14,"tag":323,"props":342,"children":343},{},[344],{"type":19,"value":345},"Детальная наблюдаемость против только основных логов",{"type":14,"tag":323,"props":347,"children":348},{},[349],{"type":19,"value":350},"Детальная",{"type":14,"tag":323,"props":352,"children":353},{},[354],{"type":19,"value":355},"Без видимости отладка слепа",{"type":14,"tag":296,"props":357,"children":358},{},[359,364,369],{"type":14,"tag":323,"props":360,"children":361},{},[362],{"type":19,"value":363},"Ускорение, ухудшающее поведение",{"type":14,"tag":323,"props":365,"children":366},{},[367],{"type":19,"value":368},"Отказ",{"type":14,"tag":323,"props":370,"children":371},{},[372],{"type":19,"value":373},"Поведенческий риск измеряется инцидентами у клиентов",{"type":14,"tag":15,"props":375,"children":376},{},[377,382],{"type":14,"tag":22,"props":378,"children":379},{},[380],{"type":19,"value":381},"Мантра",{"type":19,"value":383},": «Если кто-то находит баг, это значит, что мы поставили недостаточно предохранителей, а не слишком много».",{"type":14,"tag":30,"props":385,"children":387},{"id":386},"дополнительное-чтение",[388],{"type":19,"value":389},"Дополнительное чтение",{"type":14,"tag":49,"props":391,"children":392},{},[393,402,410],{"type":14,"tag":53,"props":394,"children":395},{},[396],{"type":14,"tag":196,"props":397,"children":399},{"href":398},"\u002Fru\u002Fdocs\u002Fsecurite\u002Fmulti-tenant",[400],{"type":19,"value":401},"Строгая мультитенантность",{"type":14,"tag":53,"props":403,"children":404},{},[405],{"type":14,"tag":196,"props":406,"children":407},{"href":198},[408],{"type":19,"value":409},"Аудит и журнал доступа GDPR",{"type":14,"tag":53,"props":411,"children":412},{},[413],{"type":14,"tag":196,"props":414,"children":416},{"href":415},"\u002Fru\u002Fdocs\u002Fsecurite\u002Fdeploiement-souverain",[417],{"type":19,"value":418},"Суверенное развёртывание",{"title":7,"searchDepth":420,"depth":420,"links":421},2,[422,423,424,425,426,427],{"id":32,"depth":420,"text":35},{"id":134,"depth":420,"text":137},{"id":205,"depth":420,"text":208},{"id":223,"depth":420,"text":226},{"id":262,"depth":420,"text":265},{"id":386,"depth":420,"text":389},"markdown","content:ru:docs:5.securite:1.principes.md","content","ru\u002Fdocs\u002F5.securite\u002F1.principes.md","ru\u002Fdocs\u002F5.securite\u002F1.principes","md",[435],{"title":436,"_path":437,"children":438},"Ru","\u002Fru",[439],{"title":440,"_path":441,"children":442},"Docs","\u002Fru\u002Fdocs",[443,456,484,512,525,533,546,607],{"title":444,"_path":445,"children":446},"Начало работы","\u002Fru\u002Fdocs\u002Fdemarrer",[447,450,453],{"title":448,"_path":449},"Добро пожаловать","\u002Fru\u002Fdocs\u002Fdemarrer\u002Fbienvenue",{"title":451,"_path":452},"Создание учётной записи","\u002Fru\u002Fdocs\u002Fdemarrer\u002Fcreer-un-compte",{"title":454,"_path":455},"Подключение ключа LLM","\u002Fru\u002Fdocs\u002Fdemarrer\u002Fbrancher-llm",{"title":457,"_path":458,"children":459},"Каналы","\u002Fru\u002Fdocs\u002Fcanaux",[460,463,466,469,472,475,478,481],{"title":461,"_path":462},"Обзор каналов","\u002Fru\u002Fdocs\u002Fcanaux\u002Fvue-densemble",{"title":464,"_path":465},"Телефония в реальном времени","\u002Fru\u002Fdocs\u002Fcanaux\u002Ftelephone",{"title":467,"_path":468},"Электронная почта","\u002Fru\u002Fdocs\u002Fcanaux\u002Femail",{"title":470,"_path":471},"Веб-чат-виджет","\u002Fru\u002Fdocs\u002Fcanaux\u002Fchat-widget",{"title":473,"_path":474},"HTTP Webhook","\u002Fru\u002Fdocs\u002Fcanaux\u002Fwebhook",{"title":476,"_path":477},"Мессенджеры (WhatsApp, Messenger, Telegram, Mattermost)","\u002Fru\u002Fdocs\u002Fcanaux\u002Fmessageries",{"title":479,"_path":480},"Meta Lead Ads","\u002Fru\u002Fdocs\u002Fcanaux\u002Ffacebook-leads",{"title":482,"_path":483},"Расписание (cron)","\u002Fru\u002Fdocs\u002Fcanaux\u002Fschedule",{"title":485,"_path":486,"children":487},"Пайплайны","\u002Fru\u002Fdocs\u002Fpipelines",[488,491,494,497,500,503,506,509],{"title":489,"_path":490},"Визуальный редактор","\u002Fru\u002Fdocs\u002Fpipelines\u002Fediteur-visuel",{"title":492,"_path":493},"AI-агенты","\u002Fru\u002Fdocs\u002Fpipelines\u002Fagents",{"title":495,"_path":496},"Детерминированные операторы","\u002Fru\u002Fdocs\u002Fpipelines\u002Foperateurs",{"title":498,"_path":499},"Управление потоком","\u002Fru\u002Fdocs\u002Fpipelines\u002Fcontrole-flux",{"title":501,"_path":502},"Шаги с кодом","\u002Fru\u002Fdocs\u002Fpipelines\u002Fcode-step",{"title":504,"_path":505},"Суб-пайплайны","\u002Fru\u002Fdocs\u002Fpipelines\u002Fsous-pipelines",{"title":507,"_path":508},"No-code действия","\u002Fru\u002Fdocs\u002Fpipelines\u002Factions-no-code",{"title":510,"_path":511},"База знаний","\u002Fru\u002Fdocs\u002Fpipelines\u002Fbase-de-connaissances",{"title":513,"_path":514,"children":515},"Супервизия","\u002Fru\u002Fdocs\u002Fsupervision",[516,519,522],{"title":517,"_path":518},"История выполнений","\u002Fru\u002Fdocs\u002Fsupervision\u002Fexecutions",{"title":520,"_path":521},"Кредиты и тарификация","\u002Fru\u002Fdocs\u002Fsupervision\u002Fcredits-metering",{"title":523,"_path":524},"Бенчмарки","\u002Fru\u002Fdocs\u002Fsupervision\u002Fbenchmarks",{"title":526,"_path":527,"children":528},"Безопасность","\u002Fru\u002Fdocs\u002Fsecurite",[529,530,531,532],{"title":8,"_path":4},{"title":401,"_path":398},{"title":409,"_path":198},{"title":418,"_path":415},{"title":534,"_path":535,"children":536},"Разработчикам","\u002Fru\u002Fdocs\u002Fdeveloppeurs",[537,540,543],{"title":538,"_path":539},"Административный API","\u002Fru\u002Fdocs\u002Fdeveloppeurs\u002Fapi-admin",{"title":541,"_path":542},"Исходящие webhook","\u002Fru\u002Fdocs\u002Fdeveloppeurs\u002Fwebhooks-sortants",{"title":544,"_path":545},"Управление betool из Claude (MCP)","\u002Fru\u002Fdocs\u002Fdeveloppeurs\u002Fmcp",{"title":547,"_path":548,"children":549},"Интеграции","\u002Fru\u002Fdocs\u002Fintegrations",[550,553,556,559,562,565,568,571,574,577,580,583,586,589,592,595,598,601,604],{"title":551,"_path":552},"Обзор интеграций","\u002Fru\u002Fdocs\u002Fintegrations\u002Fvue-densemble",{"title":554,"_path":555},"Stripe","\u002Fru\u002Fdocs\u002Fintegrations\u002Fstripe",{"title":557,"_path":558},"GitHub","\u002Fru\u002Fdocs\u002Fintegrations\u002Fgithub",{"title":560,"_path":561},"Google","\u002Fru\u002Fdocs\u002Fintegrations\u002Fgoogle",{"title":563,"_path":564},"LinkedIn Ads","\u002Fru\u002Fdocs\u002Fintegrations\u002Flinkedin-ads",{"title":566,"_path":567},"Kavkom","\u002Fru\u002Fdocs\u002Fintegrations\u002Fkavkom",{"title":569,"_path":570},"Jira","\u002Fru\u002Fdocs\u002Fintegrations\u002Fjira",{"title":572,"_path":573},"Slack","\u002Fru\u002Fdocs\u002Fintegrations\u002Fslack",{"title":575,"_path":576},"SMS","\u002Fru\u002Fdocs\u002Fintegrations\u002Fsms",{"title":578,"_path":579},"Enable Banking (open banking)","\u002Fru\u002Fdocs\u002Fintegrations\u002Fenable-banking",{"title":581,"_path":582},"CRM, маркетинг и продуктивность","\u002Fru\u002Fdocs\u002Fintegrations\u002Fcrm-marketing",{"title":584,"_path":585},"HeyGen (видео)","\u002Fru\u002Fdocs\u002Fintegrations\u002Fheygen",{"title":587,"_path":588},"La Poste","\u002Fru\u002Fdocs\u002Fintegrations\u002Fla-poste",{"title":590,"_path":591},"Отраслевые CRM (beTool Application, Qhare)","\u002Fru\u002Fdocs\u002Fintegrations\u002Fcrm-metier",{"title":593,"_path":594},"Mitti (полевые инспекции)","\u002Fru\u002Fdocs\u002Fintegrations\u002Fmitti",{"title":596,"_path":597},"Meta (Messenger, Pages, Meta Ads)","\u002Fru\u002Fdocs\u002Fintegrations\u002Fmeta",{"title":599,"_path":600},"Onoff Business (Beta)","\u002Fru\u002Fdocs\u002Fintegrations\u002Fonoff",{"title":602,"_path":603},"Smart Life \u002F Tuya (умные устройства)","\u002Fru\u002Fdocs\u002Fintegrations\u002Fsmart-life",{"title":605,"_path":606},"Продукты beTool (Desktop, Kiosk, Terminal)","\u002Fru\u002Fdocs\u002Fintegrations\u002Fproduits-betool",{"title":608,"_path":609,"children":610},"Сценарии использования","\u002Fru\u002Fdocs\u002Fcas-usage",[611,614,617,620,623,626],{"title":612,"_path":613},"Типовые бизнес-агенты","\u002Fru\u002Fdocs\u002Fcas-usage\u002Fvue-densemble",{"title":615,"_path":616},"CFO ИИ","\u002Fru\u002Fdocs\u002Fcas-usage\u002Fcfo-ia",{"title":618,"_path":619},"COO ИИ","\u002Fru\u002Fdocs\u002Fcas-usage\u002Fcoo-ia",{"title":621,"_path":622},"CTO ИИ","\u002Fru\u002Fdocs\u002Fcas-usage\u002Fcto-ia",{"title":624,"_path":625},"Product Manager ИИ","\u002Fru\u002Fdocs\u002Fcas-usage\u002Fproduct-manager-ia",{"title":627,"_path":628},"Персональный ассистент","\u002Fru\u002Fdocs\u002Fcas-usage\u002Fassistant-personnel"]